                                                        :vpc_id (id-of "aws_vpc" vpc-name)})
 
 
-            (resource "aws_db_subnet_group" vpc-name
+             (resource "aws_db_subnet_group" vpc-name
                        {:name vpc-name
                         :subnet_ids (map #(id-of "aws_subnet" (stringify vpc-name "-private-" %)) azs)
                         :description "subnet for dbs"})

     (elasticsearch-cluster "elasticsearch" {:vpc-name vpc-name
                                             :account-number account-number
                                             :azs azs
                                             :default-ami default-ami})

     (in-vpc (id-of "aws_vpc" vpc-name)
             (aws-instance (vpc-unique "vpn") {


             ;; all the subnets
             (apply merge-in (mapv #(private-public-subnets {:naming-fn vpc-unique
                                                             :az %
                                                             :cidr-blocks (% subnet-cidr-blocks)
                                                             :public-route-table (vpc-id-of "aws_route_table" "public")}) azs))
             (apply merge-in (for [az azs
                                   name [:public :private]]
                               (output (stringify "subnet-" name "-" az "-id") "aws_subnet" (vpc-unique (stringify name "-" az)) "id")))
